2025 CVE Vulnerabilities
45,377 CVEs published in 2025.
| CVE ID | Severity | CVSS | EPSS | Published | Description |
|---|---|---|---|---|---|
| CVE-2025-1687 | HIGH | 8.8 | 0.3% | Feb 28, 2025 | The Cardealer theme for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.6.4. T... |
| CVE-2025-1682 | HIGH | 8.8 | 0.5% | Feb 28, 2025 | The Cardealer theme for WordPress is vulnerable to privilege escalation in versions up to, and including, 1.6.4 due to m... |
| CVE-2025-26264 | HIGH | 8.8 | 18.0% | Feb 27, 2025 | GeoVision GV-ASWeb with the version 6.1.2.0 or less (fixed in 6.2.0), contains a Remote Code Execution (RCE) vulnerabili... |
| CVE-2025-21815 | HIGH | 7.1 | 0.2% | Feb 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: mm/compaction: fix UBSAN shift-out-of-bounds warnin... |
| CVE-2025-21812 | HIGH | 7.8 | 0.2% | Feb 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: ax25: rcu protect dev->ax25_ptr syzbot found a loc... |
| CVE-2025-21811 | HIGH | 7.8 | 0.2% | Feb 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: nilfs2: protect access to buffers with no active re... |
| CVE-2025-21800 | HIGH | 7.8 | 0.2% | Feb 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: net/mlx5: HWS, fix definer's HWS_SET32 macro for ne... |
| CVE-2025-23687 | HIGH | 7.1 | 0.2% | Feb 27, 2025 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in simonhunter Woo St... |
| CVE-2025-25333 | HIGH | 7.5 | 0.3% | Feb 27, 2025 | An issue in IKEA CN iOS 4.13.0 allows attackers to access sensitive user information via supplying a crafted link. |
| CVE-2025-1756 | HIGH | 7.8 | 0.1% | Feb 27, 2025 | mongosh may be susceptible to local privilege escalation under certain conditions potentially enabling unauthorized acti... |
| CVE-2025-1755 | HIGH | 7.8 | 0.1% | Feb 27, 2025 | MongoDB Compass may be susceptible to local privilege escalation under certain conditions potentially enabling unauthori... |
| CVE-2025-25761 | HIGH | 7.2 | 0.4% | Feb 27, 2025 | HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php. |
| CVE-2025-25760 | HIGH | 7.5 | 0.4% | Feb 27, 2025 | A Server-Side Request Forgery (SSRF) in the component admin_webgather.php of SUCMS v1.0 allows attackers to access inter... |
| CVE-2025-25759 | HIGH | 7.5 | 0.7% | Feb 27, 2025 | An issue in the component admin_template.php of SUCMS v1.0 allows attackers to execute a directory traversal and arbitra... |
| CVE-2025-22280 | HIGH | 7.6 | 0.3% | Feb 27, 2025 | Missing Authorization vulnerability in revmakx DefendWP Firewall defend-wp-firewall allows Exploiting Incorrectly Config... |
| CVE-2025-1739 | HIGH | 7.1 | 0.3% | Feb 27, 2025 | An Authentication Bypass vulnerability has been found in Trivision Camera NC227WF v5.8.0 from TrivisionSecurity. This vu... |
| CVE-2025-1692 | HIGH | 8.8 | 0.2% | Feb 27, 2025 | The MongoDB Shell may be susceptible to control character injection where an attacker with control of the user’s clipboa... |
| CVE-2025-1282 | HIGH | 8.8 | 1.0% | Feb 27, 2025 | The Car Dealer Automotive WordPress Theme – Responsive theme for WordPress is vulnerable to arbitrary file deletion due ... |
| CVE-2025-1717 | HIGH | 8.1 | 0.5% | Feb 27, 2025 | The Login Me Now plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 1.7.2. Th... |
| CVE-2025-1295 | HIGH | 8.8 | 0.5% | Feb 27, 2025 | The Templines Elementor Helper Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, an... |
| CVE-2025-21797 | HIGH | 7.8 | 0.2% | Feb 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: HID: corsair-void: Add missing delayed work cancel ... |
| CVE-2025-21794 | HIGH | 7.1 | 0.2% | Feb 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: HID: hid-thrustmaster: fix stack-out-of-bounds read... |
| CVE-2025-21791 | HIGH | 7.8 | 0.3% | Feb 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: vrf: use RCU protection in l3mdev_l3_out() l3mdev_... |
| CVE-2025-21789 | HIGH | 7.1 | 0.2% | Feb 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: LoongArch: csum: Fix OoB access in IP checksum code... |
| CVE-2025-21786 | HIGH | 7.8 | 0.2% | Feb 27, 2025 | In the Linux kernel, the following vulnerability has been resolved: workqueue: Put the pwq after detaching the rescuer ... |
Check if your code is affected by 2025 CVEs
Strix scans your code and infrastructure for known vulnerabilities automatically.
Scan your code now